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(54) Ensuring atomicity for a collection of transactional workitems in a workf low-management- 
system 

(57) The present invention relates to the area of 
computerized transaction execution with a workflow 
management systems (WFMS). The WFMS executes a 
process mode! consisting of a network of potentially dis- 
tributed activities including transactional workitems. The 
invention teaches a computerized methodology for 
defining, controlling and processing a collection of a 
multitude transactional workitems ensuring the atomic- 
ity of the collection of transactional workitems. Said col- 
lection of transactional workitems owns a separate 
commit scope not influenced by a commit scope poten- 
tially implemented within said transactional workitems. 

The current invention teaches a methodology proc- 
essed by the WFMS allowing to infer from details of the 
process model to collections of transactional workitems 
which can be processed in the sense of global transac- 
tions with a common commit scope. Transactional 
workitems with a common commit scope are combined 
into atomic spheres. 

A further method is proposed by the current inven- 
tion to process the collection of transactional workitems 
constituting a common atomic sphere. 
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Description ..-.^v... 

1 Background of the invention ■ v? . • 

1 .1 Field of the Invention t ^ ■ s 

The present invention relates to the field of process 
management of a workflow, environment on computer 
systems and the field, of /computerized, transaction 
processing. More particularly, the invention relates to 10 
the area of computerized transaction: execution with a 
workflow management systems (WFMS).: . * <. 

1.2 Description and Disadvantages of Prior Art 



A transaction, also.called a transactional applica- 
tion, comprises a sequence of operations that changes 
recoverable resources and data- such as *.a database 
from one consistent state 4 into another, A transaction 
processing system guarantees that if a transaction exe- 20 
cutes some updates against recoverable resources and 
data, and if a failure occurs^ before the .transaction 
reaches its normal termination or an interim point of 
consistency, then those updates* will be undone; (rollr 
back). When a new "point 'of consistency has befen 25 
reached and all updates made by .the transaction must 
be made permanent, the transaction commits^ ■■■ . ■ ■• 
To furf ill this transaction redovery guarantee, the system 
must be able to remember across systemoutages both 
transactions in progress and their update vactions. so so 
that their effect on recoverable data can be properly 
reflected when the system is restarted; ..In general the 
system maintains a log. recorded and maintained::by a 
log manager, of each transaction^ -.progress: and 
changes to the resources^and data in order to:fulf ill the 35 
transaction recovery guarantee. The Jog data, known as 
log records, can be examined to insure that either the 
transaction's committed actions are reflected- in t this 
database or were undone. When the log recotds include 
actual data, they can also be used to reconstruct data \40 
which has been damaged: or lost, such as by the failure 
of a storage device. The log can bethought of as an 
ever growing sequential fiie. : ^ - ^ -~ r 1 1 : 
The log is permanentiy stored on stable storage such as 
a disk file, which remains intact and available across 45 
system failures;- Log records are first written totempo- 
rary, volatile log files buffers in the computer'smemory, 
and then transferred to stable storage at certain times 
(for example when a transaction is committed).* - - 

Locking, supported by a lock nrsartager, is used-to so 
control simultaneously executing (i/e: concurrent) trans- 
actions' access to shared resources and shared data, 
and in particular is used to prevent concurrent transac- 
tions from inconsistently modifying the same resources 
and data: Appreciate use of locking can guarantee a 55 
transaction that the resource it manipulates and the 
data it reads is in a consistent state and that the 
resource and data dees not contain uncommitted 
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updates of other trai?sacticns, . ; ^ 
The recoverable ^G^seurc.es and data, the, transaction is 
manipulating further may, be supported by : a res urce 
manager A resource manager .is a subsystem that 
manages some ; transactional objects of a certain ^type. 
The resource rranager typically pffers services to appli- 
cations or other resource managers, which might be 
available in the overall system. A transactional database 
system,._a .transaction queue manager, a transactional 
session; manager and so forth all can act as a resource 
manager.. . ;!lJ . • -- t( ^s ••■ 
A transaction manager administrates, manages and 
coordinates the flow of the multitude of concurrently 
processing transactions through the computer system. 
It .orchestrate^; the commit and undq ; i.e. rollback, of 
transactions as well as the recovery of objects, resource 
managers, or sites after they fail. 
Above mentioned consistency requirement for a certain 
transaction and for all other concurrently, processing 
transaction in the locator distributed transaction system 
is more .accurately expressed as the ACI D requirement. 
Actually ^CIDicity js a.combinatipn^o four different sub- 
requirements^.v , : ; - : ... 

^'y: atomicity:. ;,. j . *• ; . ^ 
: A transactionsls changes to the state of the overall 

wit. system are* atomic;. either aiL happen or none hap- 

0; bpen. : These changes include. all : - changes to 
or; resources, including database changes, ^messages, 
n-ui.actionS;onitransc!ucQrs and so forth. = r ; 

• consistency : 

u. % A ^transaction Is a corr^-transformatipn.of the sys- 

-n- htem^stat&^ieraptions taken :as. : a,group dp not.vio- 
. -late any .of ihe integrity ^constraints ^s^pciated with 

:> - .the state. This requires that the -transaction be a 

;^ibcorr^rprc^ram.-.n v .. ^ - ■ vr ■., 
isolation-, r> Ji: .,. e -v'v -' . .. ■ 

rnp'-iEveni though transactions execute concurrently, . it 
appears to. each transaction T, that -other transac- 
r. ^^tions execute e^her before T or after T, but not both. 

^Therefore intermediate stetes of one , transaction 
pb? aw ne?t visible to the other transactions.- ; ; . 
♦y-H-duira&iSity ■ ; -\ 

; ; <jOnce a transaction, completes successfully and it 
~ jrvcornmits its activities; its changes to the state sur- 
vivehfailures. i.e.. the state changes. became perma- 
nent. „r . * * f ' .: h^. ! ri : t; ■ 

... .■bf:itc*'^% .:. : .. >-■ ^ r ■ /■ - . 

- v. . iWrthin c^n^uter.sdencermechanisms are, known to 
ensure atomicity of global transactions. ^Details can be 

;found -in "J: ;Gray,- A; ,Reuter ; Transaction^ Processing: 
.Goncepts and Techniques, Morgan Ksufmann Publish- 
ers, San 4 Rancisco. (CA)" for instance. The .focus is in 
so-called Atomic Cosnmit Protocols (ACR) which are 
synchronous: protocols allowing collections of transac- 

-;tions to reach a common .consistent transactional out- 
come i.e. a consistent system state (i.e. either commit 
or abort): The most wide-spread exploited ACP is the 
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so-called Two-Phase-Comrttit^PG) protocol - which 
has beerr impl^merrted and us^^Si\ ! 4ifTte9in a large 
numberbf different dommerciail %ysf§rfte " P ' * : - 
Due fo^ts irnportance thfr*2FG has'been standardized 
by industry consortia: FoT inSt&nfce We procedural Vari- 
ant has been* standardizfed-tiy WOPEN; Its details can 
be found in j "X/OPEN Guide,- Disfnbuted Transaction 
Processing Reference McxjelV~( Version 2). ; X/OPBN 
Company ttd.^ LtfK/1993" TheMobj^-GrtentSd variant 
has been standardized by the' Object-MahagelnenF 
Group (OMG); its details can be found in "Object-Man- 
agement Group;- Object Transaction Service (OTS)'; 
OMG Document TC 94.8.4 ' (1994)^. Many 1 standard 
compliant implementations of - the"' 'corresponding 
'X/OPEN standard exist and many corhplfcant implemen- 
tations of the corresponding OMG stand&rd are ^oh Jts 
way or have been released recently: - ■ ^ ;<v r-..v 

The expressive'power of^ "dafeic rt; triah^<^6n }tjist 
consisting of a single atomic activity is quite ^inVited? 
Many situations exist in whibh more flexible* rrfeatiS ; bf 
control would be required th&n cl^icartriansactibri pro* 
vide Especially for real-wbrW ajb|5iicaticJris cottecSwis'bf 
transactions, called a global transaction, db have to 
cooperate to achieve a desired processing goal. 
For such complex transactions various different models 
have beeri developed. Exaitiples are 'savepoint "tech- 
niques, nested transactions, chained transactions and 
so 6n. } Ah overview of differ ert^rnbdels can be found for 
instance in ? J; Gray, A.' Reutetf; Tt&hsactiOrl Processing: 
Concepts and Techniques, Mw<£n*1<auf martn Pnafbiish- 
ers, San Francisco (CA)". vonsitianm - 

•A-ct^ not 
related TP%ystems fe- We dtfhiaih of Wbrtrtlow-Man- 
agemeht-Sy stems (WFMS).-The prodess of designing, 
developihg^arvj^mahufactuYtng' a' n^ prtdufet arid the 
process of changing or adapting fcn<* existing product 
presents many challenges to product managers and 
engineers to bring the pTOdu^ : W rna J FketrforTme: ; least 
co^ ;: and within schedule while maintaining. 5 co^ even 
increasing prbdud quality. Many >companiegi are^ealiz- 
ihg thatthe conventional product design processes not 
satisfactory" to meet these heeds. Theiy -T«pireBearly 
involvement of manufacturing engineerif^iotosfrengi- 
neeringf,- logistic 1 planning, procurements manufacturing, 
service and* support with the design effort. Furthermore, 
they require planning and control of deduct data 
through design, release, and manufacturing. >. . 

The correct and efficient execution of business 
processes within a fcotllpany.-e.^^e^lopmeht dr pro- 
duction profcesSe®, -is of- enormous importance for ?a 
company and' has significant -influence^on company's 
overall success in thfe* market 'plade^'Thereforevihoise 
processes' have'%? be regarded simitaras technology 
processesTahd have to be tested; optimized and moni- 
tored, the management of Such- processes is usuaJly 
performed and supported by 1 a computer based process 
or workflow management system. r - : v 

In D. J: Spoon: Troject Management • Environ- 



ment", IBM Technical Disclosure Bulletin, Vol .. 32. No. 
9A, February 1990, pages 250 to 254, a process man- 
agement environment is ; described, induding. an operat- 
ing environment, data elements, and application 

5 functions and processes. r . • •*> , 

In R. T Marshak: "IBM's FlowMark, Object-Ori- 
ented Workftow for Missior^Critical Applications", Work- 
group Computing' Report (USA), ;Vol. 17, No. 5, 1994, 
page 3 td"13, the objectxharacter of IBM FlowMark as 

io a client/server* product built oh a true object model that 
is targeted tor mission-critical production process appli- 
cation development andadeployment is described. 

In H. A. Inniss and J. H. Sheridan: "Workflow Man- 
agement Based on an* Object-Oriented Paradigm", IBM 

15 Technical Disclosure Bulletin, Vol. 37, No, 3, March 
1994, page 185,- other aspects of! object-oriented mod- 
elling oh customization and changes are described, 
.v-vin F; Leymann and'D. Roller: "Business Process 
Management with FlowMark", Digest of. papers, Cat. 

so Nav94CH34t4-0. Spring - COM RCO N 94, 1994, pages 
230 to 234,'^he 'State-of-the-art computer process man- 
agement tool. IBM FJowMark is described. The meta 
model of IBM FlowMaricis. presented as well as the 
imptementation r»f IBM-* FlowMark- The possibilities of 

25 IBM^FIowMark for modelling of business processes as 
well as:theiG'executionare:discussed. The product IBM 
FlowMarkc; is -available for different; computer; platforms 
and documentation :for IBM FlowMark 4s .available in 
•eurery i?M branch . ; ;? -yj - • v **- - - • ■ - :: * ? ■■. 

■30 o-3 tniR.Leyimnn: "A meta nrKxJ^to suppoi1Jhe;rnod- 
eilmg and execution of processes", -Proceedings of the 
■.11th- European Meeting on Cybernetics and System 
Research EMC R92, Vienna.. Austria,, April 21 to 24, 
:t992, World ScienttfiG 4992, pages 287 to 294. a meta 

35 anrfodel-forrcontrollihg businessi processes is presented 
anddiscussed in detail, ^rn.: ; : v 

^fRie^BM ^FtawMadcfof iOS/?*\ document number 
*3H''19- i 821&01 , I BMr Corporation, 1 1994, available in 
^vefry jIBM safes j^cec- represents ;a -typical modern, 

40 fsophisticated.^nd powerful workflow management sys- 
tem, ^supports the modelling.pf business, processes as 
: a network of ^activities. This : network pf activities, the 
process model, is constructed as a directed, acyclic. 
Mreightecb colored $raph. The nodes-of the graph repr & 

-45 sent the acthfities, which are-performed. The -edges of 
thergraph, tlae controljcoonector^, de&CTibe ; th€i p<?^n- 
. tiahsequence<of execution of the 1 a^vities.vPef 1 inition of 
iheiprocess graph is iviaiihe^lBM^-WowM^k 
Language (FDL) or. the^^hl .'graphipaL^d^ ;The 

>50 xjuntime component of the workflow irvsyi^ger injefpr els 
iho process graph and distributes ttie. execution pfvactw- 
ifces to the right person^ at the right place, e -flr.dsv 
-assigning tasks to a work list according to th^ respective 
x person, wherein sajdiwor^ jist is stored as dsc^^l c^ta 
55 iswithinisaid workflow or process management computer 

f system. .;c 'T.: 4 . . 

. iln F J^eyrnann and W. A|tenhuber: "Manage oust- 
./ness processes as an information resource". f .iBM Sys- 
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terns Journal. Vol.. 32(2), 1;9?4, the mafoematical theory 
underlying the IBM FlowMark product is described. ( 

In D. Roller :- f "Verrf!kation yon WorWIows- in JBM 
FlowMark", in, J. Becker und G, Vossen (Hrsg.): , 
"Geschaeftsprozessmodellierung und u -Workflows". 
International Thompson Publishing, .1995, the require- 
ment and possibility of the verification of workflows is 
described. Furthermore the feature of graphical, anima- 
tion for verification oi the, process logic is presented as 
it is implemented within the IBM FlowMark product. 

For implementing a computer based process man- 
agement system, firstly the business processes have to 
be analyzed and, as the result of this analysis, a proc- 
ess model has to be constructed as a network of activi- 
ties corresponding to the business process. In the IBM 
FlowMark product, the process models are not trans : 
formed into an executable. At run time, an instance of 
the process is created from the process model, .called a 
process instance. This r prqcesS : instance is then inter- 
preted dynamically by the IBM-FlowMark product. ~ 

Up to the current point in timQ transaction process- 
ing systems and workflow, management systems are 
separate technological areas. Of course; it is possible to 
implement an activity being part of a process model of a 
workflow as a transaction but no further intimate rela- 
tionship do exist. For example the state of the art is lack- 
ing a flexible global transaction approach integrated into 

aWFMS, , r- •• ' ; :.-;oor* . •. -; -.C" 

Further difficulties are encountered when existing 
software components shou!d x be used ( fbr: irr^lementing 
activities; in a : WFMS and if at the same.commit scope 
and transaction boundaries, are to be established not 
already explicitly programmed into the corrfjqnents, ^ 

Different activities are currently, standardizing inter- 
faces and protocols which should allow manufacturer >to 
build components. that can ; :be t invoked by-all. WFM§s 
that are in compliance with these standard, (e.g. 
"invoked applications" qt the yyorkflow. Management 
Coalition WfMC (for details refer to "Workflow Manage- 
ment Coalition., The workflow reference; mode!:, Docu- 
ment Number TCOO^ 1 003, , 1 994) ^"business objects" as 
common facilities of the Object Management jGroup 
OMG (for. details refer, to 7G>biec| : M9nagement;;C^oup, 
The Common Object Request Broker: Architecture and 
Specif icationT^OMG. Framingham.tMA, 1992). or ^"busi- 
ness, ofcxjeqts- defined by the Object Pje(finition Alliance 
ODA). The goal is to create an -industry.for prefabricated 
components which can be bought off-tlhje-sheK to com- 
pose implementations of applications based on ; models 
for business processes. Such components, will then be 
reusable across different WFMSs and across business 
processes; In order to maximize the reusability of these 
components no assumptions should be made about its 
usage with rspecfcto transaction boundaries as an indi- 
vidual activity cannot foresee the.commit scope r/wthin 
which it will be used later. ■ •" r . -r. 

The current state of the art creates the problem that 
manufacturers of components are not able to implement 



their components Jn,guch p. way that they can comply 
with externally ^eskbttshed transaction boundaries,, i.e. 
allow /thefrjuser^ibr overwrite , the end-of -transaction 
decisions made by 'the manufacturer's implementation. 
5 This, significantly; jimrts the scope of applicability of 
KeseVcomponents '.. These components cannot easily 
compose applications which have certain transactional 
properties which otherwise must t?e programmed into 
the components of the application. , 

10 . . - r : - " •. » ..•{:■-; ■ - : \ / - ' 

J .3 Objective of the Invention 

The invention is based on the objective to control 
arri process a. collection of a multitude of potentially dis- 
75 tributed transactiphs : epsuring transactional behavior for 
this collection, i.e. ensuring its atpmictty. More particu- 
larly, the, objective of the invention is Xp provide a com- 
puterize methodology for defining, controlling and 
pro^fssing a collection of ^ multitude of potentially dis- 
20 tributed transactional wprkrtems ensuring the atomicity 
of ;the collection of/ transaptionai wqrkitem while the 
transaptipriai wOTkitems being part of a process^ model 
of the workflow environment and the commit scope of 
said collection is not necessarily implemented within 
25 said transactional workitems., .... 

2 Summary and Advantages of the Invention r : 



y !~ "The objective of the invention is solved by cl&rn 1,. 
so The^urrer^Wentip^ insures atomic execution of ^col- 
lection oif transactionai workitems processed by at least 
t one,pom#^ 

'pr^e^^m^ekj ^id ; f^<x«ss T mpdel cor^rjsing.pne or 
more .activities] ^ng th^nbcjes of an v arbitijary r graph, 

s 35 ai^idir^ed.^i^-.of: s^id graph being contrQl-ronnec- 
Jqip d^ir^ng a pot^ial f low of control within said proc- 
es^emociel. The^r^^ental.approach pf this invention 
.consists ^n^explpfting the glpbal information^ already 
available within the process model to identify and define 

AO .^pse transactional westerns constituting a collection 
of ; trgn^ction§| ^wor^ with a common commit 
^p^ a^thus representing a global transaction.. Such 
a coliecfton isoaUed an atomic sphere. For the purpose 
to .define, : sueh atomic spheres the process . model is 

45 ia^iyz^X^per^ subgra^ having the property that 
such a subgraph does not contain not necessarily differ- 
ent activities.which are connected by r a path pf.control- 
connectqrs which contains at least one activity not con- 
r^n^rin^sajd -atomic-sphere. Therefore ttje structural 

: so information Von commit scopes js ^no fonger situated 
within a TP f system or .within the transactional applica- 

The technique proposed by the current invention 
. allows ,to use the global inforrnation already available in 
55 the . process i model to define atomic .spheres. The 
. approach to assodate the definitions on commit scopes 
and transaction boundaries on the level of process mod- 
els and ncrt within the implementation of an transac- 
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tional application bpierfe'thVd^r^ for 
pref^ric&ed com^h^teSwhrc^S^&e bought off-the- 
shelf to c6frpose : impfeni6*ntati<5ns? r 6f applications 
base^on models for bushess protiesSes. Such fompo- 
nents wiii theri be reusable : ^cr^" differert jjrofcessirig 
environments and acfoss diff6r6nt buslriess T processes': 
The current teaching rti^>cimiifef^ the f eusability bt these 
components because* no Wsurri^tibns lias to be rh&de 
anymore about a comj&rierif's 1 usage- with respect'to 
transaction boundaries as an individual activity cannot 
foresee the commit scope Within which" it wilt bfe'used 
later. This invention enables manufacturers of WFMSs 



1 . to let their customers specify groupings of Activi- 
ties which will have the property that either alKactiv- 
iiies of the grouping have performed transariionaiiy 
successful (i.e: its changes 'on recoverable objects 
have been committed or w£re identified' to be brhit- 
ted from transaction completion base on-th^ctual 
workflow) or all have 1 ^b^en* snorted, y j- 

2. to'maniage such groupings at run time in such a 
way that the 4bove ; operational behavibV' T • is 
enforced. 



'J.'' : ' * t" 



This invention further enables' manufactures of compo- 
nents to implement their components in such a way that 
they can comply with externally established transaction 
boundaries, i.e. allow their users to overwrite the end-of- 
transactioh decisions made 1 by the mani^facturer^s 
incrementation. This will broaden the ^ 
bility of these components. ; ' : "' v irjr:Ci!ar ^ n f ro nOf?t!01 
This invention further enabled Users^VVf^ 
us e cbn^'o n'ents to compose 1 i^Ljppi iic^tioHs^ -Vi/h iciTr : Have 
certi^ ^ must 
be programmed^ iftto the'cohntpbhentS of the apjilicatibn. 
Moreover the iriventidh reduces th6 v: cbnc^titfetl arid 
technical gap existing betw^n'TP sys^Sms arid WFM3. 
"* v - Additional advantages aire atcbriiplfshid by •Claim 

A computerized method of defining at least brie atomic- 
sphere is extended to delerrriirie %ifik%rfi^ 
atoriiic-sphere with no outgoing' cdnfrot^bririectbr- ar^, 
: if at least one sink-activity is det^miri^;- adding a 'no- 
op-activity to said proceW-friodel being" outside of* said 
atomic-sphere and connecting said sink-activity to that 
hbKjp-actiVrty withra virtual-cintroi-coririectbr/ said ho- 
op-activity irnplementing r a 'durrimy activity.* : J 

Dueto these extensions of the process rriodel-trie proc- 
ess to execute and control atbrriic "executibn-ibl" an 
atomic Schei e, based ~ori the 1 method ; Hd; d^irie T an 
atomic' sprite, becomes much more efficient % - m 
Additional advantages are accomplished by ctaim 

The current teaching suggest to add a TRUE-trariatioh- 
condition always being true to said virtual-^bn'nectorsr 
This again increases efficiency as rib processing 
intensive Verification" is required whether the corre- 
sponding no-op-activity may be started or riot - ,h l - 



; ■ AoxJitibrial ^varitageS are accomplished by claim 4 
and 5-."" °' .•■ 
According the teaching of 'this invention^the computer- 
ized method "of defining an atomic-sphere: is to be exe- 
5 cuted' by separate control-instance which can for 
instance be a wdrkf low-management-system or a trans- 
action-processing-systenV 1 y p 

' A WFMS isanideSl candidate 1 for executing the 
suggested rnethod as tfte 'whole process rnodel infor- 

io matiori ls* available to this Icbntrbl instance. One could go 
even a : s4ep further -and' 5 exferid existing TP systems to 
feecutkj"the : methddblbgy. : lt is r alsd possible to riierge 
WFMSi arid TP systerns to a hew type of TP system also 
defining atdmib splheresf 1 ,k : 

is , : The objective of the invierrtibn further is solveiJ by 
claiWi6: v •" V:: 
the current invention teaches to atbriilcally execute an 
atomii£>spriere by it least oriie computer system by cre- 
ating ari atorriic^sphere-trarisaetion -context for said 

£o atomid-spherfe* if th A e : control -flow -along said control- 
connectors enters "said atomic-spherethe first time, and 
ensuring that the control-flow will not leave said atomic- 
sphere until the cbmlpfetfe ^ontrbl^flow' reaches the 
boundary 'of said atomic-spriere by'pbstponirig naviga- 

25 tibn along ' contrbl-cbrinectofs ,i - leaving said "atomic- 
spKere untiP all leaving' doritfo^cdriYiectors are proc- 
essed. ■ -? >-» J > ■ ?- - •.:>■<-,.. ■•■ - 

This methodology complements the meihod of 
defining ari atbrriic sphere and tfius^al&b 1 supports the 

3b i^aritages f Veferred tb-above. Moreover" it shoijld be 
pointed but r that the approach to introduce a methbd 
separate from the transactional workitems to control the 
commit scopes significantly reduces the implementation 
effort ^ and the procesisirig efficiency of transactional 

35 wprkiferf^ n Tr^saictibnal ;1 wdrkiterns are no longer 
tercetf to coritrol' , a potential commit scope they are 
bperatmg % " - - ^ * ' .; 
' Additional advantages ariai accornpfished by claim 

4o TTie-curreht * invention^ teaches- to end said atomic- 
'^her^transadibn-context. when the cdmplfete cbrttrol- 
f fI6w reaches 'said boundary of said atbrriic : SF*iere by 
Gbmmittihg" trar^rtibnal-workftems -^processed as 
; partof : said 'atomic^sphere:" 4 ' v ' r-&v>- : '.- r: - ^ 

45 - Besides the fact that this behavibf ensures the ato- 
Thichy of the global transaction it may ^reduces at- the 
: s^irrie time the number of commits arid the-effert of bdm- 
rrift : hahdling as bdrnrrirttihg ah atomic sphere* rfis(y be 
: dbne only once. i * - v '• , .o.T.T\,«:r-*.q^i. ^soq 

50 1 ^Additional adv'arita&es* arW aCcbrhpHshed &y^cfaim 

Atbrnically executing an atomic-sphere takes ptacerby 
= uslng an - existing atornic-sphere-transaction-context: if 
tf)W control-flow- enters arratomic-sphererfor whichvan 
'55 •atdmic-sphere-transactibn^context has been estab- 
lished already because the control-flow entered, said 
■(atomic-sphere before. • • « . - . ■ : 

: fv r T^ s feature supports to process the activities within 
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a process model in a parallel fashion: Each activity may 
be processed in parallel and indepertdent;from other 
activities automatically and as soon as a transactional 
workitem is started it is determined , if an transaction 
context does already -exist. If soothe transactional 5 
workitem automatically joins the atomic sphere it 
belongs to. . 

Additional advantages are . accomplished by claim 

According this -teaching, a 1 transactional -workitem ;Js 10 
either never committing said ending said atomic- 
sphere-transactioh-context or atransactionahworkitem 
is committing only, if no atomic-spherertransaction-con' 
text has been established yet. 1 - : v 

Above feature supports the possibility that a certain 15 
transactional workitem may be implemented based on a 
private commit scope but as soon it is processed; a&part 
of an atomic sphere it joins the transaction context of 
the encompassing atomic sphere Again such a prop- 
erty is a significant advantage in terms of above men- 20. 
tioned prefabricated component industry. ^ 
Additional advantages are accomplished by claim 10 

and 11. . - • *' ' ' L - '- ■ 9 : 

The current inventions 1 teaches several possibilities to 
determine a potential "existence of an atomic-sphere- 25 
transaction-context: "This ^determination can ' be 
achieved by an query-transaction-service (GetRoot). or 
by passing a potential eoci^ingvatomrc-sphefre-transac- 
tioh-context tdan activity when invokihg said acUvity.w 
by passing a tranisaction-identifier to an activity when 
invoking said activity, or by passing 7 said atomic-sphere- 
transaction-context to an acfcivitya^part of an input-con- 
tainer, r - ■ • ." r : 

This large number of different alternatives supports 
significant amount of flexibility; allowing to operate 'this 
method in almost any type of ^ifohmeht; : * ^ *•• 
Additional advantages' are" accomplished by claim 

12* '.»: i ' i. irco »t, • 

This part of the invention teaches ^ a-perfdr rriance-effed* 
tive approach to r ensure that the cbntrdl : flbw will not 
leave an atomic-sphere (S) "untiS the compile* contrcrt- 
flow reaches the boundary : of *said atomic-sphere. For 
this purpose the invention suggests to administrate a 
set of adual-c^structidns ^(OBST(S)) ^dnprisirig*the set 
of all c6ntr61<;dnn^ojrs originatirrg froni activities 
within said atomic-sphere directed ^td- target-activities 
outside said atomic-sphere and which <^htro! -connec- 
tors have nor been reached so far by the- current-prdc- 
£s£ instance, and by furth&r delaying execirtioh-cfsaid 
tVge^activities until ' ail : obstructions of said set of 
actu^-dbstructohs have been breached/- :^-z:\^i 
; Above feature exploits infbrhiatiorfalreadv fr avaifabie 
to the control instance 1 supervising the execution of ?a 
process model thus preventing to setup a lot of - extra 
control information to manage atomic spheres. : > ■• 
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3 Brief Description/off theDrawings > 

•. .-• *-.v:5i2nc^ en:, rv if '^'--:.f .. 
Figure 1 1 iS^dtagrSrh reflecting the overall structure 
' > of a transaction program in pseudo-code ; 
Figure 2 visualizes this basic control flow of a trans- 
actional application and the major compo- 
nents within a' transaction processing 
'•'>n>T.?, systerYi • ■' ' " • '■ 

Rgure 3 is a visualization of-the distributed transac- 

^itionmbdei • 1 * 
Rgure 4 is a diagram reflecting the problem of com- 
r mit scopes of a single r transactional 

o : workitem vs. a: collection of transactional 
; ; . , workitems '., ; : - 

Figures depicts an example of the notion: of an 
<-k * . atomic sphere together, with a extension 
cy-M. \ ;.■ avoiding:deadiock situations * 
Figure 6 ;v : is a diagram reflecting the major elements 
.no, r-^y- r to^tJetermine a potential existing transac- 

- : - :: Clonal context * 
Rgure? >i -.-ifcis-ia diagram: reflecting the set of forma! 

obstructions fobst(S) of .a certain atomic 
* <?:* ; sphere S* and the notionof virtual nodes 

- ■* and' virtual connectors ^ ; - - ; r - 
Figures is a diagram reflecting details of adminis- 
- trating the set of actual obstructions 
J.-- . •: * olc- :j'\> . ~ ; 

4 Description of the Preferred EmbocSiment v / 

30 j> *r tlf thexurrent specif ication is referring to a transac- 
tional^^is^kitem.vor ^.transaction in-general, this repre- 
sehts* no UniHation to:a local or distributed transaction. 
Typically according : thiS3Specif ication a transaction may 
be of any of these types. Moreover, when; referring to 
35 the general 'notion . of. a. transaction,! the textual context 
will :make~ clear^if ^ that general concept is meant or if a 
transactional vvorkitem. as a specific, embodiment of a 

transaction is denoted. 

Even if the following is concentrating on transac- 
40 tional workitems being activities within a process model 
rt i§ttf be pointed out that any number of additional (non- 
transactiohal) activities also be part of a process model 
which will not be referenced explicitly. 
? i-^:The current invention is illustrated based on IBM's 
45 FlowMark wbrtdlow management system. Qf course 
any Other WFMS/could be used inst^id. Furthermore 
the current teaching, applies also to. any other type of 
system which offers WFMS functionalities not as a sep- 
arate WFMS but within some other type system. For 
50 'example WFMS functionalities coukJ be integrated to 
-TP systems. ■ ; - > - : 

4.1 Introduction ^ * : 

55 4.1 .1 TraRisaction Processing ^ 

As already outlined, a transaction, also called a 
transactional application, . comprises a sequence of 
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operations that changes : recovarabtef!<qes0ur6es sfad 
data such as a database from one consistent state into 
another;: A transaction proees^i^g^ytst^m guarantees 
that; if a, t transaction^3xeQutes ^onrj§ n updates against 
recoverable resources and. : dataj and jfa failure qcqu/s 5 
before the .transaction reaches, its normal termination or 
an interim -point of consistency,: toe^n those updates will 
be undone (roll-back). When a new pojflt of consistency 
has been reached and alkupdates:rnade by the trarj§ac- 
tion must be made permanent, t&e. transaction is com- to 
mitted. ' ■ y* , ; - '- ■/ 

Figure 1 gives a short-outline x>n the overall struc- 
ture of a transactioncprogram \n apseudo-code repre- 
sentation. Of course a transaction application program 
can 'be* written in dny conventional omspecialized, pf6i is 
gramming language. The transaction application pro- 
gram declares the start of a new transaction by invoking 
BEG I N_WO R KO in line >1 . Thereafter:all.operatioras«p.er J 
formed by the program will i be part; c4 this transaction. 
Also, all operations performed by ;otheri;programs in 20 
service of the transactior^application program (within 
the program scope of line 2-3) wiH be part of the trans- 
action. The program declares the fransaction to be a 
complete and correction transformation of the system 
state by invoking>€OMMITLWORKQ jn line 5 ol Figure 25 
1 . Once the transaction su<Scessf ulty commits, the trans- 
action's effects are durable and persistent. If something 
goes wrong in,the transaction; thafransacfcon appi&sh 
tion can undo all the operations by invoking 
ROfcLBACK_WORK() in line^; If thecewafailujre.during 30 
the transaction's execution; ther system «srfctHQfJateraHy 
cause the transaction to be.Tolled:;back-sBE<EBIN-GOM- 
MIT or^BEGiN^ROLLBACK^dhen; areused bracket 
the f ACID transformations.- J . ^:-:..v- aaa.t? ?o -{i 

The basis control f low^of a itiansactional: application 35 
and the major components within a transact*or*pfoce3s- ^ 
ing system are-visuali2ed in Figured: Figure 2:dep»cfei< 

- - the transaction program 20Q;>.< "\:* ti f i; n^lj 

a one of a potential multitude of iresourse^rtjanagers 40 

■ 2 tor a resource„managers being, a^ubsystemrthal 
: manages some transactional objects) of .arjcortaip 
type. The resource manager typically:>offersf serv- 
*■ ices to /applications ; or other resource* jnnariHQers, 
■ which might be available in the cveraH system*,- ! i & 

- the transaction: manager 220.; which orchestrates 
the commit and rollback of transactions as *velfc;as 
the recovery of objects; resdurces^resource; rrian- 

: ag ers or local ore r enx>te sites ■ after tritey! fail , a 

- the log rnaiiageir 230, which recofds a-dofeiof -so 
changes made by the transaction, so that 3 consist- 
ent version of all objects and resources can be 
reconstructed in case of failure, ■ / 

a lock manager 240, which provides a generic 
mechanism to regulate vccncurrenU access : to 55 
objects and resource, helping the resource manag- 
ers to provide transaction isolation, : 
"- the transaction, recovery functions 250,. activated in 
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case i of failures, withrin-. the commit, scope of the 
- transaction program. :; :■ ■" » ■ 

According to Figure 2 ; the BEG1N_WORKO verb 201 
starts the transaction, registering it 202 with the trans- 
action manager arid creating a unique transaction iden- 
tifier 203. Once the application has started a 
transaction, it can begin -to : invoke resource managers 
204 to 205, reading and writing databases, sending 
requests: to local and.remote sites or manipulating .any * 
other type of resource. ..:-<■,*■- 
When a resource *:manager; 210 gets the first request 
associated with that transaction, it Jol.os, 21 1 the trans- 
action, telling the local transaction manager 220 that.it 
want's to partipipate in the transaqtionss commitment 
and rollback operations. It istypicaJf tor sei f eral resource 
managers to join, the transaction ;- As- these resource 
managers perfoem- work on behalf of the transactions, . 
they. keep, lists of changes, they have- made to objects. 
As arruje, they record botb; the old aneMhe new value of 
an object or resource. The transaction processing sys- . 
tern provides . a - logging; service : 21.2 to ■ record these 
changes. The log manager 230 efficiently implements a 
sequential file of aU the updates o( transaction to objects 
and resources. Ot course; theiriesqtirce managers have 
to tell the log.manager what these updates are. 
To pcovWerisola±ion L resource marta^rs Jqcfc.213 toe 
objects and ,fespurpes accessed bythe:transactiqn;,this ; 
prevents) dfrer transactions front geei ng , th e i u ncpmmit- 
ted updates of* this transaction ^iid presents -them from 
altering the data r^ad or written by this, uncommitted 
transaction. The tr^Rsaction.. processing system pro^ 
vides a lock manager 240 that other resource managers 

V^e^ t thQv*^sactiqni2QQ ..isfsyes GOMM!T_WORK() 
206, the transa^tion-rTia^gerLperfoFms an atomjc .com- 
mit ■prQtpcp|/iL i 0ifjn..tr\Q current case a.two-phase-com- 
mrt-protocol 260. First, it queries all resource managers 
th$H«n.editbe^transa if they think the 

transaction is a <?qnsist^nt and Gqrnplete T transforrnation. 
Aw resource .inan^iger can vote no 362, in which jcase 
the commit f^ls,->8ui,rr : al^ vote 
jye^\2ffi, ?tben the.:^an»rticn::.ij5;a. correct -transforma- 
tior^ ar)d the ^transaction manager reco^sjhi^fact in 
log^ informirKj each ./e^ource ; ,rmnager : . tha^ the 
.transaction i^ .corrplete^At this point, the^eso^rce f marjr 
^ge*s<?an release jfeejqcte an«i p^M^rrn.anyv^h^^ 
^jpns - needed : j toj cpmplete-, tl^e transaction v ; : ; lf ^ 
itfan$^jpr?. should faiLduring execution, or. if ^a .rp&qurcg 
^nanager .votes no, during phase 1 .^..the-^PPp^jerj"^ 
transaction manager orchestrates transaction cojlrbac^. 
:!n this case, th&transactjon. manager r ( ead%thje transac- 
^cn's logjnd, fqr;^acrx log record, invokes the. resource 
manager that wrote the Jog record, asking the resource 
manger to. undo the . operation.: Once the undo scan, is 
complete, the transaction manager invokes each 
resource manager that joined the transaction and tells it 
that the transaction was aborted. 
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The transaction manager also orchestrates transaction 
recovery if a node or site faiis. It provides generic serv- 
ices for the failure of a singie object, the failure of a 
resource manager, and the failure of atferitire site. 
In the following offers 'a sketch of how the transaction 
manager helps in system recover/ - " =• 

After a site fails, the transaction processing (TP) system 
restarts all resource' managers. Several transactions 
may have been in progress at the time of the failure. The 
resource managers contact the transaction manager as 
part of their restart logic. At that time, the transaction 
manager informs- them about the outcome* of : each 
transaction that was- active* at the time 1 of the failure. 
Some may have committed, some may have aborted, 
and some stiilmay be in 'the progress of committing. 
The resource manager can recover its committed state 
independently, or it can participate in the transaction 
manager's undo and redo scan of the log? 
If a resource manager fails but the rest of the TP system 
continues operating, the transaction manager aborts all 
transactions involved with that resource manager. 
When the resource manager returns to service, -the 
transaction manager informs the resource manager 
about the outcome of those transactors. The resource 
manager can use this information arid the transaction 
log to reconstruct ils state. " " r.v 
if a particular object is tost but the resource manager is 
otherwise operational; then the^resource mahager can 
continue to offer service on other objects While the failed 
object is reconstructed from an archive 1 copy^and from a 
log of ali committed changes to that copy The%ahsab- 
tion manager and the log manager aid recovery from an 
archive copy of the object. 

Each site usually has a separate transaction manager. 
This allows each site to operate ind^ehderitly of 1 the 
others, providing local autonomy. When We transac- 
tions execution is distrtouted among sa/eral sites, it is 
distributed among several transactions ntehagefs. In 
that case the 2PC protocol is used Within multipl ^trans- 
action mahagers.' 1 j '■ - r ? so" -•*■ 

- "Resources, also called transactional Sbjects; maih- 
tai tied and controlled by a resource rrahager are pr^ 
tected resources or recoverable resources." Actions 
targeted against protected resources do hot externalize 
their results before they are completely ^donfe. Their 
updates aire b6mrnHrheht'(x>ritrbir^ ( tfi'ey can roll-back if 
anythirig f goes wrong before a 1 normal r £n3 t ancf ohce 
"they have reached their normal end; there wiil be no uni- 
lateral Voli^ Thus actions targeted- at protected 
re^urc^ haVe the : ACID i prbperty.^ v ^ : " ' ; f - 

Figure 3 visualizes a TP system mor e focussing on 
the aspects of distributed TP systenTs'. Furthermore 
some variants compared to the model outlined in Figure 
2 are portrayed. The model of Figure 3 is albrig the lines 
of the X/OPEN Consortium point of view. ! - 
Figure reflects two TP systems 301 and 302 cohhefcted 
via some computer network 303. "Both 'TP systems 
encompass a specific resource manager responsible for 



the communieaticYi irf between them, the communica- 
tion managers 304 &fi£3 305. Moreover in this model it is 
assumed that eafctf resource manager 306 and 307 has 
a private log and a private lock manager.. It is presumed 
5 that the resource managers performs its own roll-back, 
based on a single; roll-back call 'from the transaction 
manager; in case the transaction aborts. 

" The e^re^ive power of a "classic" transaction just 
consisting of a single atomic activity is quite limited. 
10 '■ Many situations exist in which more flexible means of 
control would be required than classical transaction pro- 
vide. Especially for real-world applications collections of 
transactions do have to cooperate-to achieve a desired 
"processing goat. Such a collection of classical ACID 
is transactions is called a gGobal transaction if its atomic- 
ity is ensured. From computer science mechanisms are 
known to ensure atomicity of global transactions. One 
'ajiprdach to deal with the problem of global transactions 
are r sb*calied chained transactions. Chained transac- 
20 Sons offer a particular approach to reduce to a certain 
extend the processing effort associated with synchro- 
nous Atomic Commit Protocols (AGP) for assuring ACI- 
* Dieity. ; Other approaches are for example ' savepoint 
1 techniques, nested transactions, sagas and so on. 

Workflow W^nagemant Systems 

'°" ;r *"The fdflowing is a short outline on the basic con- 
cepts of a workflow management system based on 
'30 E HBM f s FlbwMark WFMS^ : 

i9i >3frorB aWehtef prise point of view the management 
*df busfh^^^pfbdess^ is booming increasingly impor- 
tant: busmess "prdcSss^ which 1 piece of work 
' vvill T be ' pferforrhecS 'by ^whbrh and which f esotfrfces are 
? 35 Scploit^f for this -work, 'ive. 5 a busings process 
d^cribes how ah 'enterprise will achieve its business 
"■gdalS: i A : Wr^S ; 'h^y'SUffl3ibrt both, the modeling of busi- 
ness processes ahtftheir execution.- > : = - 
" 0iTl ^W6d&iihg"'df ^ltoirt^ process &s a syntactical 
:i 40 s ! urift in at-way thiit is directly supported by a software sys- 
^em~is v ^rerh8fy desirable. Moreover, the software sys- 
-tern-dan also wdrk'as ah inteipreter b^cally getting as 
input such 1 ' 1 model : The model, called a process 
-'rnociSI,^' can then be instantiated and the individual 
: 45 1 'sequence of work stepis dependirtg-on the context of the 
instantiation of the model can be determined. Such a 
model of a business process can be perceived as a 
template for" a class" of similar processes performed 
within i an^eriterpris^; it is a schema describing ail possi- 
so biV execution ^ variants' of a particular kind of business 
process/ Ah instance of such a model and its interpreta- 
tion represents an individual process, La a concrete, 
context dependent execution of a variant prescnbod by 
the model. A T; WFMSs facilitates the management of 
: 55 business processes. It provides a means to deserve 
models of business processes (build time) and it drives 
business processes based on an associated mode* (nr 
: time): -The meta model of IBM's WFMS FlowMark. i e 
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the syntaeticairel^rnentg;, prev(§l${i jf^^^ribing busi- container,' and, data; connectors. A process is repre- 
ness -process models^and the nailing and ijiterpreta- genteel as a directed aeydic gr^ph.with, the activities as 
tioaqf the^syntactfip^l element^ ii#^pribe4;next:.. nodes and theicpntrpj/data-connectp^as the edges of 
Activities we- the . fundamental elements of the the Graph. The graph is (nanipulated via a. built-in, event- 
meta model.' An activity represents a :business action s driven, CUA compliant graphic editor. The data contain- 
that is from a certain perspective a semantical entity^of ers are specified as named data structures. These data 
its own. With the modetof thetousiness process it might ^ructures themselves ^re specif ied via the QataStruc- 
have a fine-structure that i%then,represented in turn via tur^DeJnition facility. Floyviytark.distinguishes three.main 
a model, or the details oijt-^re na\ of jnterestat;alUfroni -typespf activities; program.actiyities, process activities, 
a businesSiprpcess modeling point of view rR^in^nr^nt io and^lpqKs. Rrqgram ; actiyities are implemented through 
of activities via process mpdels. allows for both , , mode- programs.; The pepgrams are registered via the Program 
ling business processes bottocn-up and top-down. , -Definition facility, Blocks, contain the same constructs as 
The results, that ,jare ip general produced J?y. the processes, such as activities, xconfrol .connectors etc. 
work represented by an activity .is put into.an^putput They are hpweyer^ not nam^d f and have-their own exit 
container, which j$ associated with each : aptrvity. SinQe as conditiprv^Jf the exit condition is nptmet, theblock is 
an activity will in general require Jto access, putput con- starte0 ; ^gain. s The block thus implements a Do Until 
tainers of other activities, eaph a^yity.is* associated^ construct. Process activities are implemented, as prpc- 
addition with an input container tQOi^runi!tifl?e q t^e esses. These subprocesses ar^. defined separately as 
actual values for the>formal p^^^^uijding.jfte regular, na^ed processes with aJt.its r usual properties, 
input container: pf an activity ^present,the. actual, cgn- so 'Proems activities t#eg great flexibility for process def im- 
text of an instance of. the activity, h- - - ;- iV ,* tipn. tt.not only aJtows to construpt.a process through 
. Since activities mightnpt ifr exequ^d arbitrarily .permanent refinement pf .-activities iptp, program and 
they are bound together , via= wntr^^coni^ector^ A prpce^s activities (top^oym), ; but al^p to build a process 
control connector might ; be^p^ceived as^^irected <** P* a.set of ^exi^tinjg processes (bottom-up). In partic- 
edge between two activities; the activity at the connec- 25 ujar, .piocpss activities help^p organize -the modeling 
tor's end point cannot start t?eforQ.tlaa^ctiyity at the start work if several process modeter^re- working together. It 
point of the connector has finished (successfully). Con- ^allows the tear^ rr^n^rs to work ind^Ren^ently on dif- 
trol connectors, model, thus the poten^f law of control rJ#em^jy#e$, .Rwgram and process activities pan be 
within a business process^eLwc. -v,- s r w. !;.as^.iat^ : v^mta#me Jimrt. The tim^. liniit^pecif ies.how 

In addition, a Boolean expression c^l^an^tion so -fong ^ y e t ^^may ;: take^ 

condition, is associated wi».^p^^pnt^ fiQRnector. ..#signatedi person,^, notified.. K ttiis person {jtoes not 

Parameters from output rppntaje^^ r>eact wittlin another time limit, the process administrator 

already pxoduced , their ^^tefiEet^ipw^Jr^^pararoe- 'S notified. It not only helps to recognize critical situation 

.. t ers, r e^nc^ fiMfc.also to detept process? deficiencies. as all notifica- 
time an s<#vityjerminates succes^ully ^%cc^rp|^c<w- v .35 ?tipns arexecord^ in ar> aujJit trail., ■, 
nectors leaving this activity aredeterminj^^nd tbjB.t£Uth :.e vAW data .structures ,.used as templates for the con- 
value of the associated transition : jDon^j)ipns^iSj. ; Qpm- etainere.pf -activities and. processes are Refined via the 
puted based on the actu^Uv^Uyes -eft, ^ir^j^m^teps. rjD^a ^t4eture:Q#initiGn Facility., Data-Structures, are 

. Only the end points pf contrpjicpnr^ec^rs.^hef tr&Qsrtion joarnes Jtnst- arei<lefiped in ? teenns,, Pf . elernentary data 

conditions of which evaluated to.^RUErar^coflsipleriBd K 4° types, such as float, integer, or string and references to 

as activities, that might fee ^ceiputjejdjta^ . eyisting^d^ta ^victuf^s-.v Managing, dat^ structures as 

context of the? business process** Tr^f^itiqnj; cxjy^^pns .^ar^tej^tie^has tbagdyjantage that all interfaces of 

modetttiusthe,com©ct dependent actualilpi^tpf control ^acliyities.and their in^jpmentatiohs are.managed cpn- 

withiaa business process* (i.e. instenc^ ; ^a^fg^e v . ^a^tei^y. ip p t n^ plape (simtlar to heade^ fDe^ in program- 

• ? FJow^4arK consists,- at the -coarse^ ^ei(el^ofc% biiild - :: 45 .nning t^uagjes)., , . v . ; 55 - f ..-. fjr: - ( ^. 

. time component and a run tim^<Kamponenti Thei^uild : ; ^ Ad programs; which implement .progr^nj .^yitjes 

time component- supppcts^the ^modeling t oV jDusiness r .are ^defjnect.yia the Rrogr^^egistratioa^ 

-processes according, f lo tfie r .meta. model dg^cribjed -tered fpr e^ch ptpgranj js.the .name o^^ 

. above and the run time cpmponentj^pports^acwe- h iqs§tion. ?nd the inypcati^ 

sponding semantics. .Both : ^conppgents rJ arft j.nple- so consists of the program. naifneand ^e .^^marx^ ^I n 9 

mented in a cliecrt/serveF. structure. Jfhe. client -deliyiers ^.passed to th^program, ; •. v . .- 

the interaction : with tiie. r yi|ser; via t an ,obje!pt ? oriented > ! 4 . Before proper instances ^ : b^ 

graphical inten>ce, .invokes local tcraJs., and, provides mode! rnust be translated toinsure the conectpess 

animation. The server maintains'the database .for pr : pc- f vand ^rnpleteness of the process" rnodel. Jhe translated 

ess instances, navigates through the process, graph, ss version of the rnodel is used as a ten^late when § ,prpc- 

and assigns the activities to the proper :i re?ources 1 ^ ! r o^s Jnstance is creat€?d. Tfiis allows to make chariges.to 

Process definition includes modeling , of actiyitiiBS, ,^e process model without affecting executing process 

control connectors between the .activities, input/output instances.. A process instance is started eithef via the 
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graphical interface of via the^cafiable process applica- 
tion programming interface. When a process is started, 
the start activities are located, the proper people are 
determined, and the activities are posted- onto the work 
list of the selected people. If a user selects <the activity, 
the activity ;s;.executed and removed from the work list 
of any other user to whom the activity has.been posted. 
After an activity has executed/ its exit condition is evalu- 
ated. If not met, the activity is rescheduled for execution, 
otherwise all outgoing control connectors and the asso- 
ciated transition conditions are evaluated,. A control con- 
nector is selected; if the condition evaluates to, TRUE. 
The target activities of the selected control connectors 
are then evaluated. If their start conditions are true, they 
are posted to the work list of selected people. A process 
is considered terminated, if all end activities have com- 
pleted. To make sure that all ©nd activities.finish, a 
death path analysis is performed. It removes all edges 
in the process graph. which can never be reached due to 
failing transition conditions. All information about the 
current state of a process is stored .in,' the database 
maintained by the server. This allows for forward recov- 
ery in the case of crashes, ;-. ; , ^ : 



4.2 Overview on the Solution 



The current invention describes a methodology of 
how a WFMS can ensure that particular collections of 
transac^ohal wbrkiterm are performed in ah atomic 
manner. The WFMS thus achieves ah Integration: of 
transactions by a WFMS. f '■ ' J c , ; 

Up to the current point in ti me transaction process- 
ing systems and workflow management systems are 
separate technological areas. For example the staite of 
the art is lacking an approach of a multitude df WFMS 
activities representing individuaPpdtentiaily distributed 
transactions which assemble some \ype 6i global trans- 
actions with respect to an underlying TP sy§tem, v for 
which atomicity is assured. Moreover'no approaches for 
defining and observing a commit scope vvith^ransaciion 
boundaries encompassing several aGtrvrties^withln r the 
WFMS are available; not to talk about the possibility to 
model commit scopes and transactions boundaries 
within a WFMS Le. outside TP systeins. • 

; Further difficulties are encountered when existing 
software corftjforients should be used for implementing 
activities irr a WFMS and if at the same time'transactibn 
boundaries are to be established' hot already 'explicitly 
programmed into the components or if at the same time 
transaction boundaries are to bo established deviating 
from thofse explicitly programmed into'the components. 

Various activities are currently standardizing inter- 
faces and protocols supporting the goal to create an 
industry for prefabricated components which can be 
bought off-the : shelf to compose implementations of 
applications based on models for business processes. 
Such components wiil then be reusable across different 
WFMSs and across business processes. The paradigm 



c 



of components based* software construction promises 
the; large scale; exploitation of the benefits of reusing 
prefabricated parte to buiid applications even by non- 
data-processing professionals: These parts are plugged 

5 together via "using languages" like scripts or workflows. 
By focussing in what follows on workflows as the means 
to plug parts together, the usual nomenclature of "activ- 
ity irnplememation"- (or 'activity^ for short) instead of 
r partrjcan be. adopted; In drderto maximize the reusa- 

10 bility of these components no assumptions should be 
made about its usage with respect to transaction bound- 
aries as an individual, activity cannot foresee the commit 
scope within which it will be used later. 

i Therefore the current invention is based on the 
15 approach, that the WFMS itself is responsible to estab- 
lish and control the. commit scope and the transaction 
^boundaries of groups of activities within the process 
model;" "said * activities are ;: called transactional 
workitems if transactional behavior is to be guaranteed 
so for their execution. The fundamental approach of the 
current-invention will, be to support to* specify transac- 
tional 'properties of groupings of such components 
external to them as a property of the model of the busi- 
ness process . The invention is especially independent 
25 from any enhancements of above mentioned standards 
already published becausedhey are considered to be 
not practical=based on Jabove mentioned obstructions, 
■r j ;The current state of the art creates the problem that 
*■ manufacturers of components are not able to implement 
30 -their ^ cempohentsi rn'sucti.a way that they, can comply 
with externally established transaction boundaries, he. 
allow ^their ug^Mo^overwite the end:Of -transaction 
decisions made : by the. manufacturer's implementation. 
This significantly limits^ the. scope j of r applicability of 
35 these' componertts; ? These components ; cannot easily 
compose :applications..which have certain transactional 
properties which otherwise must be programmed into 
-the components of tine application: r 

c ' Now; in prder to be reusable in a large spectrum of 
40 "applications each activity implementation must have in 
-addition (to^ above mentioned requirements) the liberty 
*>t0- establlshi^its own transaction boundaries. The prob- 
lem ocburs when an application requires the grouping of 
sucfr activity;* implementations into a cx>rnmon transac- 
ts ^ tion 'boundary, for ^example to avoid theloss of updates: 

■ fuming according to Figure 4, which reflects the 
problem of commit scopes of a single .transactional 
workitem versus a group of transactional workitems, 

■ that^a funds transfer workflow encompasses an activity 
50 ^WITHDRAW::401 and an activity^DEPOSIT 402. The 

• WITHDRAW, activity withdraws the amount to be trans- 
ferred from the account being the source of ths transfer 
and- the DEPOSIT activity deposits this amourti to the 
account being the target of the transfer/ Both activities 

55 commit their changes to their (local) database accord- 
ing locai commit scopes relating only to the individual 

• transactional workifem. It might happen that the commit 
s of the DEPOSIT activity is not accepted while the com- 
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mit of the WITHDRAW activity is ascepted.'dn this case, 
the amount 'has . been ; wittakaw^y^rcHtr.-the ;sburce 
account but: it: has^ nat:beeh :dep08rte* on the target 
account. As a result, as r no global eorrunrt scope eneom- 
passing both activities >W IT:HD RAW ..snd DEPOSIT 
could -, be established, -the: amount to betransferred^ is 

lost! ' ■• i' ^ 



-1 



To cope "with th^se: difficulties the -current invention 
allows to specify transactional pretties- of groupings 
of such components external ttf them' as a property of 
the model of the business profcess. J - r > ; ' r ^ 

This invention enables fnanufa'cturers of WFMSs 



'■t ih 



1. to leHheir customers specify groupings* of Activi- 
ties which willhave the property that either all activ- 
ities of the grouping have performed transactional^ 
successful (i.e. its changes oa. recoverable objects 
have been committed or were identified to be omit- 
ted from transaction* completion base on: the actual 
workflow) or all 1 ^ - v -J. 

have been aborted; 2, to manage such groupings at 
run time rn such a, way*. that the above; operational 
behavior isienforced..;/ s ;v< r ; : 



. 2.'' . • ' *.*"-■■ ij t . I » »■ .-1 . • l - -J ;■• - - 

This invention" enables martufactuEes ■ compo- 
nents (see above) .to implement thetrr components in 
suctv a way that they can comply wrtb^externally estab- 
lished transaction boundaries. t.e. r allow their users to 
overwrite the end-of -transactroacfecision&made by4he 
manufacturer's implemertationi"Thi&;wflr^^ 
scope ofr applicability^ these c^nponerftfer,>ei><& .-tftv 
/ This invention enables users^WFfcftSs ferfeasiry io 
useT components to composes applications • whiorvlbave 
certainrtransactionaJ -properties 1 which otherwise must 
be programmed into the. components of 1het:applicaticin. 
.The major concepts of the* current irtv^iofrafft^:; 



1. Only transactional workitems^ can be grouped 
together so that a WFMS can manage- the 3 ,atomic 

: outcome of the operations, of :a-coltectiQn;.Qf ;SMGh 
workitems. A trar^actionah workrtemrjs a wprfcitem 
whose associated activity implementation • isrbased 

1 on a recoverable .resource manager :and;>whQse 
behavior is influenced by .participating ir>a:fran&ag- 

-;tionr:Of. course other non-transactionah.activitijes 
may participate in #ie underlying process modelbut 
they will not benefit from the atomicity support.; 5 - 

. 2. Only atomic spheres (a concept: introduced by 

. the invention and further ^outlined below) c^n. be 
controlled to reach 'an atomic outcome. Consider 
the (not necessarily connected) subgraph, of > the 
graph representing the model of - the overall work- 
flow, being; a specific instantiation; and th&execujta- 
ble version : of a process modelX. ; definecJ ..by: a 
collection * of .transactional . workitems; ; ,This. $ub- 
graph is an atomic sphere if and only..rf none of iits 
connected components is reachable ; from; a (not 
necessarily different) connected <x>mponent tf ©f *the 
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,. '<same graph via-a. path within the encompassing 
graph containing at least one node not belonging to 
. the sub-graph. v 

■ 3. When 'the* control flow enters an atomic sphere 
the first timev the* WFMS creates a transaction con- 
text for the- atomlc' sphere. This* transaction context 

— is shared by*- all transactional workitems contained 
'• within the aitomic sphere-The WFMS ensures that 
■ ■ the workflow wilPfiot leave the- atomic sphere until 

the" control-flow within -each connected -component 

- i " of the atomic sphere reaches the boundary of the 

atomic sphere.' At thispointin time the WFMS ends 
* the* transaction represented by- the common trans- 
action context by* Issuing fa f global commit for all 
transactional' workitems* (activities) within the 
atomic >^phere -to the/: underlying . transaction 
~ ' processing system. - ; 

4.3 The Behavior of the Activity Implementation 



■;,->: 



f - The; activity i .implementation . of a transactional 
workiterrt must not initiate an endTof-transaction (EOT) 
processing when invoked within an atomic sphere. This 
is because it must be avoided that a single transactional 
workitem commits the commit-. scope pf a collection of 
transactional workitems combined into an atomic 

•sphere; l v>/i ; .-T> y > ,v ^aw.. rrv-'.. 
to . .Several- principle solutions - are. possibly ^for ,this 
*;reQtiirem.ent TJie activity implementatipn can ( achieve 
*:.this eather soever initi^ing EOTprpcessing, or invoking 

this functionality only if it has-verrfied that there is no 

current common transaction context (encompassing the 
^commit scope <rf >ttiis specific transactional workitem) 
r^established^t:* ■.; - . * 

Vv"t Anracdxity inrplement^on. avoiding invoking EOT- 
rpro^ssing depends ; oo; an eracorrip^ssing instance like 

^vWFMS :pr<^.cl^g^atprn^ according ta this 

vinveriSQn to-comi^jirt ; -or rollback its, processing /esults. 
idF QfthiSt-fi^^pse-that the object aqtiyity implementation 
nwilbrno^jfparjtcir^te iin;,a^. jeoJiection pfc fransactional 
•:workrtems ; ar^ ;^pmicity ^ is tQtib^ .assures for that spe- 
i>cif ic activity alpnei the activity implen7erttation ; wiH be an 
• atomic .sphere pf-its own. y r < ,-:•>•. . , t 

An activity jmpjementatipn, being able to establish 
: > its own transaction boundaries^ out- 
•>side VVFMS ir^ementing ; atomic^ sph^res r .pa9; v ^he^ 
■ the existence of a currer^ trareaction qpnt^yt aQ3prding 
. one of the fpllowtng possibilities: ..^ t : . 



r.:3::ir."i;j-.;;C' 
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Iti -aiir, QMGt.Object: Transactipn. Service^ ^{OJS) 
, ; r ^ e^rpnment ipvo<^tion of the getj.c».ntrol() :oper?.- 
r.j tipn could be extended to return.a potential existing 
£ ; transaction context. ...If, a NULL . object reference, is 

- t f^turned there ^s no transaction- context, established 
: ,^and the activity implementation. has to establish its 
, ;? . : .cwn transaction : boundaries; otherwise s the activity 
..v irnpiementation . is. not. allowed to initiate EOt- 

- prociessing because this will be done by the WFMS 
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due to an existing transactional context. - 
in an X/Open Distributed Transaction Processing 
(DTP) environment invocation of the tx_info() func- 
tion of the transaction manager interface could be 
extended to return a potential existing transaction 
context. If the transaction identification (XID) ele- 
ment of the returned TXINFO structure is null, the 
activity implementation has io ; establish its ' own 
transaction bouhdahes c because there is no trans- 
action context established; otherwise the -activity 
implementation is not allowed to initiate EOT- 
processing because this will be done by the WFMS 
due to an existing transactional context. ! * 
Another possibility is that the activity, when started 
by the WFMS, is getting^ passed a transaction con- 
text or a reference to a transaction context is such a 
transaction context has been established already. 
Thus depending on whether a transaction context 
has been passed the implementation of the activity 
can decide whether to "establish ah own' transaction 
context or '-not ! ^ "■- : 



4.4 The Notion of an Atomic Sphere 



A workflow is an instance of a process model. We 
assume that process models are described as a net- 
work of activities Constructed as a directed; acyclic, 
weighted, cbfored graph (in accordance with the" view of 
responsible standardizatibh body W?MC) , so a workflow 
may be perceived as a particular collection paths 
taken in such a graph. Of coursie the -execution of the 
various potential paths may or may not depend on fur- 
ther conditions, for example bh transition cohditions. 

The activities to be performed within a process are 
the nodes of the associated graph. A workiterh within a 
workflow is always associated within a particular activity 
of the corresponding graph. Consequently; the grouping 
of workitems w.r.t trarisiactiohal behavior is performed 
by specifying a collection of activitts® of "a process 
model, in that sense a set of activities of a process 
model is called an atomic sphere if ahd only if the sub- 
graph defined by this set does not contain two (not nec- 
essarily different) nodes which are connected via a path 
in the encompassing graph which contains at least one 
node not contained in thb atomic sphere. < - ^ 

It is important to recognize' that the WFMS iisetf is 
able based bh a process model to automatically deter- 
mine atbmid spheres. ; jMoreover it 1 is possible ■ for 
instance that, baseid bri' certaih criteria- a user :: might 
define (for instance a (Specific node belonging dK nor 
belonging to a certain atomic sphere) that the'WFMS 
itself is able based on a process model to automatically 
determine atomic spheres. ' <r '- 

The transactional semantics'of ah atomic sphere is 
as follows: When the control enters the atomic Sphere 
the first time the WFMS establishes the commorttrans- 
action context for all workitems corresponding to activi- 
ties 



within the spher&.THae WFMS will; postpone navigation 
along all.edgesleavrng the atomic sphere.until all these 
edges are ready for further processing. At this point in 
itime the WFMSJssues a global commit i.e. thetransac- 
s tional, workitems encompassed in the atomics sphere 
: are initiated to progress with their EOTprocessing. 
* : The fundamental restriction on a collection of activ- 
ities to define an atomic sphere is that paths which are 
leaving a sphere must not enter it again. This is to avoid 
10 deadlock situations. Figure 5 depicts an example of the 
notion of an atomic sphere. For example, Figure 4 
depicts an atomic sphere S 601 consisting of the activi- 
ties A 510 to H 517, satisfying above defined criteria. In 
cease the activity J 518 is added to the process model 
is i with the two dashed control connectors 530 and 53 1 the 
\ collection S={A,:i?,H} will no longer be an atomic 
^sphere because D 513 and G 516 are connected via a 
;path {531, 531}' that encompasses a node (namely J 
518) outside of Sr Thus, the WFMS would wait with nav- 
■20 ~ igating from D 513 to J 518 until the control flow is ready 
;to leave the. sphererfrom both, C 512 ^and H 517. But 
sine© G 516 will never be started by the, WFMS because 
it is waiting forever for the termination of J . 5 18, H 517 
will never be started showing the dead-lock condition. 
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4.5 Determining the Common Transaction Context 



^Mjr; : Let S be an atornic sphere in.the-prpcess P. All 
^ workitems (which, are^transactional by* definition of an 
so :atomic^sphere) performed within an atomic sphere are 
"execute transaction; context. Thus, 

vrwhen ^rstmyioast isrentering a sphere the WFMS must 
make:sure :that ^a>common transaction context i(sirnply 
called the root in the ; following) which is; representing S 
35 : :is estafc^ished: If the root has already been established 
^becacise^of the control flow entered the sphere before 
* . the:transaction identifier of this root is, returned; other- 
wise, the root is created and the associated ; transaction 
^identifier :iST£turned..,r e ; > 
40? :Tc:t: .When ^the implementation of s a (transactional) 
'Cworkitem Arwithin an atomic, sphere, S;is invoked it must 
^ get passedr ^or , instance by; certain parameters) the 
transaction identifier. RootID of the root .transaction rep- 
' t resenting -This allows A to determine the: already 
45 established transaction context. . Another possibility is 
^ that the= transactional workitem.A is calling a specific 
- service, getRootQ in our embodiment, determining and 
returning a potential existing transactional context. As 
! shown in. Figure 6* which reflects the major elements of 
so ^a^C+V program for the getRoot() service, this determi- 
nation can be done without irtvolving<the WFMS for this 
-purpose^ The basic logic- behind getRootQ as reflected 
in Figure 6 is to create a new transaction context in line 
1 7 rf no transaction context has been created so far and 
55 to just return the transaction context in line 22 if. one 
does exist. 

But in this case or in similar cases when relying on 
c-f* : comparable services according the environment spe- 
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crtic operations- of \X/0peh*DTP:oFOMG:DT$, respec- 
tively, the activity^ a 
certain type of transaction prctoefes^g'terwironmentr To 
avoid 'this, ihe^Current invention; proposes that the 
WFMS' supptoirts the identifier of 4he common transac- 
tion context as a burtd^data member ?RbotlD" of each 
input container, BuMhis;is nofccrucial for ; the following 
and one could provide other mechanismslike an APj tor 
"invoked applications^ allowing, to; enquire, the jooj .{for 
example the above 'getRootO\ytill suffice^ 



1VJ 



4.6 The Notion of Obstructions -j ■ 

r.:r- * t j,"\ ■. " • 

Let S be an' atomic "Sphere in the process R.:lf :S 
contains an activity with no outgoing control connector 
(called a sink)we*add a virtual node (e.g. an activity 
having a NOP- implementation performing, no actual 
activity other than just '"returning) to^ : but outside ;of S, 
and conned ail sinks of S with this particular "virtual 
node" via a "dontrol Connector, then callednvirtual con- 
nector, having a TRUE transition -condition!; "Die -set of 
formal obstructions lobst(S) of S is d^ined as the set 
of all&dges originating irom ^n a<^rty withirtiS having 
a : 'target actiVrty outside'df "S.- ; The formal. obstruction set 
of an atomic sphere represent the transitions of all dif- 
ferent paths <Dt the 'potential flow; Of gohtrbl from** within 
the sphere to outside of the sphere. 

r Above 1 mentioned teaching are reflected in Figure 
7. Figure 7 shows an atomic sphere S 700 with certain 
activities and certain control^COTnector&rllhejiactiyity 
701 is sink according atovetermmolcg#ta6 aheEe^s.no 
outgoing control connector as&^tebftwflhrthat activity. 
By^ddirtcf^i : wtual node 702r«nd :a)viftuaL.comector 
703 activity 70 r Icicfses tr^ property ofrrepresenti^ a 
sink: Finally after this ^modifications , of the: process 
model the atomic sphere* S 700vhas:a sel-sl: formal 
'obstructions consisting ; of the controls Connectors ^ of 



bbst(S) = {703, 704, 705}. 

The set of actual obstructions (or-obst pactions for 
short) obst(S) of S is-the set ofall. formal obstructions 
whichhave n6x been touched by the navtgatorfcafeed on 
the current Stat3 of the conesponding-process instance. 
Except for the beginning, the'set of fOEmah obstructions 
6Va sphereis in general a proper superset of - its-aetual 
obstructions (i.e: fbbst(S) ^ obst(S)). 'According the cur- 
rent- teaching the usual navigation.prooessing of the 
WFMS is adapted to maintain the set of all actual 
obstructions*-- ' r •-■■- •*, „ -r - ? ^ V ; ' • ■" 1 t->- 

When the control flow enters such an" obstruction it 
must wart along the corresponding paihsuntiliall other, 
obstructions are reached. At this latter point, in time the 
(root) transaction corresponding- to the: atomic sphere 
will be committed by the WFMS. 



r 
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4.7 Navigation in At mic Spheres 



ItJ* 



Let A be an activity implementation; that just termi- 
nated so that the WFMS performed a navjgaJion^step 



based on A; in^FlowMark an "exit condition" must have 
^been met or the activity, must, have been "forced fin- 
ished" before a furtheri.navigatipn step of the navigator 
takes place, .but ?s .those ! details are not outlined.in more 

5 .detailjs. Fpr .each control qpnpector . haying a transition 
condition which evaluates to f RUB returned by the nav- 
igator- ,as next possible } path, to tollow.it is checked 
whether the associated, : edge«i§ an obstruction to com- 
mit or whether the usual processing can be performed 

w (i v e. determination of its. target activity, 'then staff resolu- 
tion ,.. r ). ..When, an obstruction is reached it. is removed 
from the obstruction set and put into the set of control 
connectors aJong, which. navigation is held. If it was the 
. last obstruction^ the, sphere S a commit for the associ- 

is ated transaction is issued. Then all waiting connectors 
are released. i..e v th$ usual processing along the corre- 
sponging paths continues.. > .. , 
: . By administrating the set of actual obstruction the 
/.WFMS isv.able -tp control when Jthe boundary of an 

20 ? atomic; sphere is. reached and when to commit all trans- 
actional workitems which participated ( in . the. atomic 
sphere. Figure 8 outlines further details of this process. 
For example within ;a ; loop M an_ analysis, of all outgoing 
paths from the activity just finished its processing is per- 

25 formed encompassing:^ : . 
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;» y a step;.in line 25 to determine thft next path within 
y, & theprpQ^ss mode) J eavi ng the current activity. .... 
•v.Ji:*xia step in tine t 27 r to check if the. <^jr„rent next path 
r;ntr. belongs . 
r : rt- v- «f the. current next path belongs to the spt of actual 
t 1 : obstructions, a step in. line 29.3Q tp. : remove that 
path from the ; set of formal obstructions, and to hold 
, . navigation along that p$th, . 
i.rfcrif the; current next :patti belongs not to the s^t of 
' ;•! ^.icactual ote^ 35 processes the 

• ' and finally^ifrtiie z&X of actual instructions i^ gmpty, 
;;^;oo"the;CQ^ be cpmpiitted 

I'.e&cc ^ U n ^ 4 ?f„andfal! held . navigations along connectors 
Hij? is rele^edjn Iine 42. ; ow ^ 



n , ,5 Acronyms ? 



4* ■* V 



; 45 2 PC Two-Pha^e-pommit Protocol.., , : 
AQP .; Atonic Commit Protocol ?tl , ,,. t 
r >PTS J: . - Djstnixrted frapsactipn Services,. ^ ,. : - c , , 
vv IS^^v^o j.nternatipnal Standard Organiz^cii . ^ , 
ifvQOA: j Object Derfinition Alliance. , .,. „. v . 
.: so x ; OMG ObjectManagement Group, P . T y. . y ^ r . 
. ■ r , QTS M - Ob[ect transaption Services \ . : , , ' \- 
,TM . . Transaction Manager . : J ^ t * , , 

TP Transaction Processing , . 
WfMC VVorWlpwtf ; Management Coalition - 
: 55 r *-:r.wpis Workflow Management System 

-XI*Q. S . , ; , Transaction Identif.ication , , . . * r ... , 
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Claims 

1. A computerized method of defining at least one 
atomic-sphere for ensuring atomicity of a collection 
of transactional-workitems by at least one computer 
system, said computer system storing a process- 
model, said process-model comprising one or more 
activities being the nodes of an arbitrary graph, and 
directed edges of said graph being control-connec- 
tors defining a potential flow of control within said 
process-model and one or more of said activities 
being transactional-workitems to be processed 
atomically, 

said method of defining being characterized by, 

determining said atomic-sphere as a collection 
of said activities being a subgraph of said proc- 
ess-model to be executed as a global-transac- 
tion, 

and further determining said subgraph that 
does not contain not necessarily different activ- 
ities which are connected by a path of control- 
connectors which contains at least one activity 
not contained in said atomic-sphere. 

2. A computerized method of defining at least one 
atomic-sphere according to claim 1 further charac- 
terized by 

determining sink-activities of said atomic- 
sphere with no outgoing control-connector and, 

if at least one sink-activity is determined, add- 
ing a no-op-activity to said process-model 
being outside of said atomic-sphere and con- 
necting said sink-activity to that no-op-activity 
with a virtual-control-connector, said no-op- 
activity implementing a dummy activity. 

3. A computerized method of defining at least one 
atomic-sphere according to claim 2 wherein said 
control-connectors are associated with transition- 
conditions said method being characterized by 

adding a TRUE-transition-condition always 
being true to said virtual-connectors. 

4. A computerized method of defining at least one 
atomic-sphere according to anyone of above claims 
being characterized by 

being executed by a control-instance control- 
ling execution of said process-model. 

5. A computerized method of defining at least one 
atomic-sphere according to claim 4 

wherein said control-instance is a workflow- 



managementrsystem . or. . wherein said, control- 
- instance is a transaction-processing-system. 

6. A method of atomically executing an atomic- 
sphere, said atomic-sphere being defined accord- 

•i - Jng to anyone of claims >t. to; 5 ; said method being 
executed by at least one computer system and 
characterized by 
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.creating an\atqmicrsphere-transaction-context 
for said atomic-sphere, if the control-flow along 
said control-connectors ^enters said atomic- 
sphere the first time, and 

ensuring that- the control-flow will not leave said 
atomicrsphere until r the; complete control-flow 
reaches the boundary of said atomic-sphere by 
postponing navigation along control-connec- 
torsleaving said atomic-sphere until all leaving 
controlrconnectors.are evaluated. 



7. A method of atomically executing an atomic-sphere 
^according to cjarm 6 characterized by 

ending said atomic-sphere-transaction-con- 
text, when the complete control-flow reaches 
if : .r said boundary of said atomic-sphere by com- 
t j ; r mitting , all- transactional-workitems processed 
<K.r: as part of said atomic-sphere. - 
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8* n A method of.atornically executing an atomic-sphere 
.-■ a & accordsng:4oi an^one^f .ciainrv.6 to 7 ^characterized 



■by g; k'~r 
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~ .using an existing catomic-sphere-transaction- 
b context; if » the controHlow; enters -an atomic- 
sphere for which an atomic-sphere-tr ansae - 
t tion^context^ has, been established already 
because the control-flow entered said atomic- 
sphere before; - • ■ - -= -r 



v A method of ; atomically executing an atomic-spher e 

uaccqrdingSo anyone of claim 6 to 8 , 

wherein said transactional-workitems may 
either never committing said ending said atomic- 
sphere-transaction-context of said atomic-sphere, 

Or «~ ; . r :■* t. - - 

wherein said transactional-workitems may 
n committing said ending of ..said, atomic-sphere- 
transaction-context of saidatcrniic-sphere only, if no 
^ atomic-sphere-transaction-context has been estab- 
lished yet. : » ■ 



10. A method of atomically executing an atomic-sphere 
55 according to anyone of claim 6 to 9 characterized 
by 

determining a potential existence of an atomic- 
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s^ere-traiis^on-cont^ -by^a^ractivrty by 
.: either calHrrg a que^yitmwsSf^A-sefviGe (Get- 
Root), or by 

passing said potential existing atomic-sphere- 
transaction-context to an activity when invoking 
&aid activity, or by r- v f : * 



passing a transaction-identifier to an activity 
when' invoking' said ^activity said transaction- w 
f identifier' allowing- toideterrhine said atomic- 
sphere-transaction-TCOnfext: i 



12. A method of atomically executing an atomic^sphere 
according to anyone of claim 6 to 11 characterized 

ensuring that the controt-fJow will nof leave said 
; atomic-sphere (S) : until . the complete control- 
flow reaches the ; boufcdary of said atomic- 
sphere by administrating a set of actual- so 
obstructions (OBST(S))'*compr^ set of 
■ ; ail cohtrol-conhectors originatti^fnsimfacti^ties 
within said atomic-sphere directed to target- 
activities outside said atomic-sphere and which 
:■*, • tbntrol -connectors have not been: reached so 35 
' * far by the current process instance;- and by fur- 

delaying execution of said target-activities until 
alU obstructions of said set oi^actuaJ-obstruc- 
tions have been reached.':^" o w .^r^ : 40 



11 . A method of atomically executing an atomic-sphere 
i according to claim TO/further endompassing at least 75 
one ■ inputs-container associated with, said activity 
and further characterized by -•■ox 

passing said atomic-sphere^transaction-con- 
text ta an activity withln said atomic-sphere as 20 
part of said input-container. " 
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» 1 • * 



-i r 



•1 \, 1 



1 3: -A method of atomically executing an atomic-spherfe ocv 
according to anyone of claim 6 to .12;beiing charac- 
terizedby : - v^- 

- being executed a control-instance control- 
ling execution of said process-model. > 

14. : A method of atomically executing an atomic-sphere 

- according^to claims 3- ^ r*- - J :> - ^ ^r^* \i -so - m-j.k\>l 
whereinsakJ control -instance is . aiworkflaw-man- 
agement-system or wherein said control-instance is 

a transaction-processing-system. * .-v * 

* ' 1 * * ******** ^ *" * * * * i* 1 * *> tv 1 »-"• ■ ^ f 
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1BEGIN_W0RK( ) ; : 

2 <any sequence to caSJL^ ^to r 'i^ 

3 <any other activity ;WJ:^ 

4 if (success) : / > / " 

5 COMMIT_WORK( ) ; ' . „ '* ,r 

6else 5 • 

7 ROLLBACK_WORK( ) ; - ■ 



,* _ 



Figure 1 
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w. r : */ 

2/" I»P«t: . ' ft? " 

4/* - S is an atomic sphere /' t .-' \. */l 

5/* / *' */) - 

6/" Precondition: 



7/* KEK«sa=essss= 

e/ m The function 'will be called whenever the control flow^enters S; */ 



9/* before this i. ' the data member S. Root ID of sphere S will" contain the */' 
10/* default v«iup- HULL. ; ? 

-— - — >- • 

s * 

1 2A tonics ph ex e: :gex_Root( ) 

1 transaction root; \ % ^ 



15if( this-enteredFirstO ) Y^^f^ /• Is S entered first tine? 



16 < , . ^. if 

I 17 root - TransactianManager.createXact( );/• Create gnew transaction */ 
; 18 thia.RootID - root ' ^ /B data menber 




19 }; - . 

20 'v " " f* • • ^ocnerwise the data */ 

21 - ?*".4^anber is already set: //' ' 
22return this. Root ID; ' \ 

23) ; , ^ 



Figure 6 
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2/* Input: 
3/* 

4/* - s is an atomic sphere 

5/- - A is an activity implementation that has terminated, sc. that 
6/* navigation, will take place for it 

aAtomicSpheraActivlty: :Navigation< AtomicSphere S, 
9 Activitylnpl A ) 

10 { ,j . . .< i. ■ — * - 

llTransaction root ■ S - getRoot ( ) ; 



/'* 3Uct -associated with sphere*/ 



12set of(ControlConnector) obst(S), 
13 ~ HextPaths, 

1* 

16 heldln(S); 

l7held!n(S) - S.getwaitino^W 
1 ONextPaths - A . navigate ( ) 
19 

20 : 

21do_until( MextPatha.e^>ty() ) 

22 < 

23 Activitylmpl B; * 

24 ControlConnector E; fy 

25 E - KextPaths-pick(j£ 

26 obst(S) S.getAct44»b«tructions( ) 

27 i£( otetlSl.M^iW^E)')'^ 

28 { * . t 

29 obst(S).renove(E); 

30 beldln(S) .put(E) ; 

31 ) 

32 else 

33 < 

34 B - EndPoint(E); 

35 B. dispatch! ); 



>; 



-?(?■- 



39 i£( obat(S).€PQpty() ) 

40 < 

"41 root.cos«s±M") # 

42 waltln< S) .releasee ) ; 

43 }; 

44 return; 

45) 
46> 



/* obstructions to commit */ 
/* leaving control connectors */ 
/* with 'true' transition codd*/ 
/* or virtual edge ffflf|k±nk */■„. 
/-deferred edges to ^follow */ 

/* get current waiting edges */ 
/* get 'true* control connects*/ 
/* or return "virtual" edge */ 
/• for sinks, *' 



/• pick retrieves and removes */ 
get, current obstructions ■ •/ 

/» Is E an obstruction? */ 

—f 'remove obstruction edge . */ 
/* hold navigation along B */ 

/^fflt target node of *"*/ ; 
/* dispatch B for further */ 
/• processing, i.e. evaluate ■/ 
/* start cond., staff reeolut.*/ 



/* last obstruction. r« 



red? 



/• eoesftit root transaction 
/* release held connectors 



Figure 8 
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